Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7289.roa
File: AS7289.roa (raw, json)
Hash identifier: nlMzgT76uLdfe80dgOEnunlVuK0r2y4Nbfy5qu2guI0=
Subject key identifier: B3:45:B1:41:29:4B:0E:DB:7C:87:BF:D9:2C:00:78:66:EC:83:DB:F1
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4F7D3A880EC5A93795FFBDBE2A99839EA08ECEFE
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7289.roa
Signing time: Tue 28 Jul 2026 03:19:16 +0000
ROA not before: Tue 28 Jul 2026 03:14:16 +0000
ROA not after: Tue 27 Jul 2027 03:19:16 +0000
asID: 7289
IP address blocks: 212.17.225.0/24 maxlen: 24
212.17.226.0/24 maxlen: 24
212.17.227.0/24 maxlen: 24
212.17.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7d:3a:88:0e:c5:a9:37:95:ff:bd:be:2a:99:83:9e:a0:8e:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 28 03:14:16 2026 GMT
Not After : Jul 27 03:19:16 2027 GMT
Subject: CN=B345B141294B0EDB7C87BFD92C007866EC83DBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:58:f1:cf:d6:9f:53:ec:40:aa:37:48:91:
bf:fa:a2:19:7b:8b:df:72:7a:dc:a9:1d:6f:2b:b4:
a6:4e:2f:5b:85:20:e7:a3:21:a3:f5:08:43:41:f5:
3a:8d:71:35:c4:30:f4:47:64:c2:96:84:e1:41:00:
2c:b7:f1:17:8e:5a:c7:42:d2:cd:c9:5f:00:44:d0:
e6:ee:f6:0e:69:12:d5:7b:a8:ff:0f:0b:70:00:65:
47:bd:3e:5e:3b:e7:3a:b9:b8:d5:6d:05:15:fe:4a:
43:9d:b8:61:b3:2b:d5:26:94:a5:8a:3e:9a:c8:5c:
93:53:8d:76:95:e6:a1:a3:b7:c4:7f:07:a7:05:6b:
8c:5c:e4:2c:2e:79:2a:9c:53:33:b5:19:95:35:be:
0d:12:3a:9e:d9:46:02:26:c2:b3:60:99:84:e3:59:
58:50:32:39:bf:81:43:fd:f8:52:b1:62:f6:ec:9b:
1a:d9:0c:bf:fc:cd:34:b1:0b:84:84:b5:40:5d:ab:
8e:d7:3a:92:29:a3:d8:6f:d1:2c:cc:93:40:aa:99:
b2:4d:81:10:11:9b:ae:04:a0:1b:3d:fc:a4:1a:e0:
c1:fa:cd:10:53:8c:93:cd:53:cf:4b:39:cd:dd:66:
53:fc:be:c5:fe:28:06:47:43:26:6f:ca:c5:a1:ea:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:B1:41:29:4B:0E:DB:7C:87:BF:D9:2C:00:78:66:EC:83:DB:F1
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS7289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.225.0-212.17.227.255
212.17.233.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:a9:87:63:a0:d1:25:1d:33:3d:4b:a1:98:7d:0c:c7:4e:
27:68:60:1b:6b:1a:b6:1e:8d:aa:bf:fc:00:f6:11:eb:8c:87:
d7:d9:bf:e5:cd:7d:f6:30:1f:c8:ca:54:02:5f:32:47:e9:00:
fc:83:5e:7c:a8:89:6c:b3:5e:f4:f4:87:c5:78:89:a7:34:0d:
7c:e4:3a:e8:3e:6c:24:bb:06:4b:0e:01:b8:57:e3:69:ef:f7:
02:e2:8f:e5:2d:3e:7f:cd:a3:f2:1e:04:ea:be:fe:80:d3:a3:
b2:af:f5:cc:50:42:d9:cb:47:d7:4b:e7:46:5e:78:d7:4b:9b:
b6:87:9e:19:81:f6:c5:c5:dc:c8:85:dc:e9:e7:29:f3:d4:46:
df:67:0e:92:57:38:fd:1e:34:f2:2a:03:ae:80:41:bf:4e:bd:
35:a3:4e:b0:bc:a1:5b:f2:11:38:a6:85:0e:86:0b:6f:06:bb:
c3:82:80:c4:b1:00:bd:84:2c:96:47:c3:0c:9a:28:57:9f:97:
86:78:87:68:2c:af:ed:e7:84:2a:76:1a:ed:9c:f9:4e:ea:46:
b2:05:a5:0e:b6:d9:76:34:9a:53:50:17:bf:8c:9b:d5:fd:96:
0b:8f:b2:d0:07:46:e4:bf:c3:5b:ae:0c:f7:1e:29:65:b0:e3:
dd:63:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:49 2026 by rpki-client